U.S. authorities dismantle Chinese hacking platforms targeting NASA and Senate FAST-MOVING

cyber espionage China-linked hackers critical infrastructure QScan QTRouter

U.S. authorities, including the Department of Justice and the FBI, have dismantled a major Chinese state-sponsored cyber-espionage operation. The operation targeted highly sensitive federal agencies and critical infrastructure, including NASA, the Federal Reserve, the U.S. Senate, the Department of Energy, and the Department of Health and Human Services.

Federal investigators identified two primary hacking platforms, QScan and QTRouter, operated by a group known as QTFY. These platforms were linked to the China-based Nanjing Xinjiuwei Network Technology Company, which allegedly provided services to China’s Ministry of State Security and the People’s Liberation Army.

Technical analysis revealed that QScan was used to automatically scan for and infect thousands of internet-connected IoT devices worldwide. These compromised devices were then integrated into the QTRouter network, which utilized commercial proxies and virtual private servers to obfuscate the origin of the attacks, making them appear to originate from outside China or even from within the targeted networks. The malicious infrastructure has reportedly been active since at least 2018.

Entities

China · Department of Justice · Federal Bureau of Investigation · Federal Reserve · NASA · Nanjing Xinjiuwei Network Technology Company · People's Liberation Army · QTFY · U.S. Department of Justice · United States Department of Justice · United States government

Claims

What the coverage asserts, and how many sources carry each claim.

[● 7 SOURCES] Targets of the hacking include US military networks, hospitals, power companies, and defense contractors. keyt.com · krdo.com · kvia.com · otvoreno.me · abc17news.com · +2 more
[● 5 SOURCES] China has denied the allegations of cyber-espionage. keyt.com · krdo.com · kvia.com · otvoreno.me · abc17news.com
[● 17 SOURCES] The Justice Department seized three internet domains affiliated with a Chinese tech company used in the campaign. keyt.com · krdo.com · kvia.com · otvoreno.me · abc17news.com · +12 more
[● 26 SOURCES] Compromised agencies include NASA, the Federal Reserve, the Department of Justice, the Department of Energy, the Department of Health and Human Services, the National Institutes of Health, and the U.S keyt.com · krdo.com · kvia.com · otvoreno.me · www.news20.ro · +21 more
[● 18 SOURCES] US officials allege a major Chinese cyber-espionage campaign has compromised numerous federal agencies. keyt.com · krdo.com · kvia.com · otvoreno.me · www.news20.ro · +13 more
[● 17 SOURCES] Hackers affiliated with Chinese military and intelligence services allegedly used a Chinese tech company to obscure their activities. keyt.com · krdo.com · kvia.com · otvoreno.me · abc17news.com · +12 more
[● 17 SOURCES] The group provided hacking services to China’s Ministry of State Security and the People’s Liberation Army. pelop.gr · www.tanea.gr · www.reporter.gr · www.lykavitos.gr · www.sofokleousin.gr · +12 more
[● 13 SOURCES] The U.S. Department of Energy, Department of Health and Human Services, and the National Institutes of Health were targeted. www.reporter.gr · pelop.gr · www.tanea.gr · www.lykavitos.gr · www.sofokleousin.gr · +8 more
[● 16 SOURCES] Authorities seized domains associated with the QScan and QTRouter hacking platforms. www.reporter.gr · pelop.gr · www.tanea.gr · www.lykavitos.gr · www.sofokleousin.gr · +11 more
[● 21 SOURCES] The hacking infrastructure had been active since at least 2018. www.reporter.gr · pelop.gr · www.tanea.gr · www.lykavitos.gr · www.sofokleousin.gr · +16 more
[● 25 SOURCES] The U.S. Department of Justice and FBI seized three internet domains supporting two hacking platforms, QScan and QTRouter. www.reporter.gr · pelop.gr · www.tanea.gr · www.lykavitos.gr · www.sofokleousin.gr · +20 more
[● 5 SOURCES] Targets included NASA, the Federal Reserve, and the U.S. Senate. www.reporter.gr · pelop.gr · www.tanea.gr · www.lykavitos.gr · www.sofokleousin.gr